In a landmark ruling, the European Union has fined LinkedIn €310 million (approximately $334 million) after the Irish Data Protection Commission (DPC) found the platform guilty of mishandling members’ personal data for targeted advertising. This hefty penalty underscores the importance of obtaining proper consent and adhering to the strict requirements set forth by the General Data Protection Regulation (GDPR).
The DPC’s investigation revealed that LinkedIn failed to establish a lawful basis for processing users’ data, which includes demonstrating legitimate interest or contractual necessity. DPC Deputy Commissioner Graham Doyle emphasized the gravity of the violation, stating, “The lawfulness of processing is a fundamental aspect of data protection law, and processing personal data without an appropriate legal basis is a clear and serious violation of a data subject’s fundamental right to data protection.”
This decision is rooted in a complaint lodged back in 2018 by the French non-profit organization La Quadrature Du Net. The complaint prompted an inquiry into whether LinkedIn’s practices were compliant with GDPR standards regarding the lawful, fair, and transparent processing of personal data. Initially filed with the French Data Protection Authority, the case was subsequently transferred to the DPC due to LinkedIn’s European headquarters being located in Ireland.
In response to the ruling, a LinkedIn spokesperson commented, “Today, the Irish Data Protection Commission (IDPC) reached a final decision on claims from 2018 about some of our digital advertising efforts in the EU. While we believe we have been in compliance with the GDPR, we are working to ensure our ad practices meet this decision by the IDPC’s deadline.”
Looking ahead, LinkedIn must demonstrate compliance with the DPC’s orders and improve its data handling practices. The company faces a significant challenge in aligning its advertising strategies with the stringent data protection laws of the EU, but failure to do so could result in further legal ramifications.
For more details on this story, check out the full article on Engadget. As the digital landscape continues to evolve, this ruling serves as a stark reminder for all companies operating within the EU about the critical need for transparency and compliance in data management.
